Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff628b89-9857-41f9-ad26-71ea8c802cb9/47274137-8620-37cf-85ae-8c52651ab03b.roa
File:                     47274137-8620-37cf-85ae-8c52651ab03b.roa (raw, json)
Hash identifier:          PImtd8ZfS22HR1GKq7pe3k0SF+aNtvTtxeoV7ZK7ZWM=
Subject key identifier:   B2:B0:72:AC:AE:50:17:16:B2:0B:D2:3B:FA:07:30:BA:83:A9:FA:50
Certificate issuer:       /CN=ff628b89-9857-41f9-ad26-71ea8c802cb9
Certificate serial:       010D0C9F4328584F2527A4F8CCF92AD80A1C2340
Authority key identifier: 12:46:29:CC:92:DC:F6:9A:7B:62:C1:F1:EC:9B:E9:FD:26:ED:4E:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff628b89-9857-41f9-ad26-71ea8c802cb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff628b89-9857-41f9-ad26-71ea8c802cb9/47274137-8620-37cf-85ae-8c52651ab03b.roa
Signing time:             Sat 12 Sep 2026 01:00:12 +0000
ROA not before:           Sat 12 Sep 2026 01:00:12 +0000
ROA not after:            Fri 11 Dec 2026 02:00:12 +0000
asID:                     62973
IP address blocks:        23.183.72.0/24 maxlen: 24
                          192.5.255.0/24 maxlen: 24
                          2602:819:5000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff628b89-9857-41f9-ad26-71ea8c802cb9/ff628b89-9857-41f9-ad26-71ea8c802cb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff628b89-9857-41f9-ad26-71ea8c802cb9/ff628b89-9857-41f9-ad26-71ea8c802cb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff628b89-9857-41f9-ad26-71ea8c802cb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:25:27:a4:f8:cc:f9:2a:d8:0a:1c:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff628b89-9857-41f9-ad26-71ea8c802cb9
        Validity
            Not Before: Sep 12 01:00:12 2026 GMT
            Not After : Dec 11 02:00:12 2026 GMT
        Subject: CN=8a92cd90-17ba-4f32-9f2d-b6d28a557edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:94:ff:20:02:c7:06:bc:f9:45:a9:c9:5c:
                    6f:9c:59:16:3f:3d:89:61:64:bc:80:4d:b4:27:cd:
                    bf:6d:d6:89:5c:1c:8f:4f:54:6c:df:20:6e:ed:c7:
                    19:16:21:0d:c4:ce:d6:d6:dc:a0:b6:62:f7:a5:12:
                    f3:09:1c:a0:19:19:f0:9d:75:03:6e:4c:ef:1f:d5:
                    8b:02:76:9d:f6:d3:fc:df:6f:bc:df:9d:6c:c4:bc:
                    d2:27:55:62:97:41:a1:79:17:3b:96:5b:70:71:ae:
                    b4:98:a6:97:28:26:dd:f7:bd:c0:4b:13:5a:8d:63:
                    3b:73:7d:55:85:a4:09:c8:b7:1a:05:c7:42:a3:39:
                    08:6f:8f:b9:f1:54:c3:0f:cf:c0:a0:bc:39:1d:33:
                    59:53:6b:7c:6c:b7:88:b8:03:cf:37:d3:ed:b7:56:
                    d3:dc:eb:75:dd:d1:f5:c9:ce:01:14:80:5b:79:4e:
                    f9:41:65:53:0c:03:03:96:a5:25:e7:73:42:5b:4f:
                    38:85:e8:35:c3:c9:1b:67:73:8d:98:34:df:80:c4:
                    66:30:68:60:6a:af:8a:74:4b:37:c7:4a:c0:fb:a2:
                    73:cb:4e:89:d7:bb:23:d1:84:83:33:30:9c:6b:05:
                    ad:e6:49:ab:5a:1e:18:e8:42:15:65:2a:11:21:18:
                    b9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B0:72:AC:AE:50:17:16:B2:0B:D2:3B:FA:07:30:BA:83:A9:FA:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff628b89-9857-41f9-ad26-71ea8c802cb9/47274137-8620-37cf-85ae-8c52651ab03b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff628b89-9857-41f9-ad26-71ea8c802cb9/ff628b89-9857-41f9-ad26-71ea8c802cb9.crl

            X509v3 Authority Key Identifier:
                keyid:12:46:29:CC:92:DC:F6:9A:7B:62:C1:F1:EC:9B:E9:FD:26:ED:4E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff628b89-9857-41f9-ad26-71ea8c802cb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.72.0/24
                  192.5.255.0/24
                IPv6:
                  2602:819:5000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:9b:18:45:34:bf:10:82:60:1f:4e:74:d6:96:1c:25:a0:0e:
         f8:e3:31:e1:34:db:f0:25:9e:f7:f0:5c:84:02:63:1d:e4:25:
         a5:3e:a1:a3:ba:ee:62:46:f2:55:a5:78:59:7b:b9:c7:5c:84:
         70:2c:34:6f:99:2a:d9:7d:ff:2f:66:c6:1c:72:5b:6d:ce:69:
         13:54:d8:05:33:cc:55:99:f4:aa:cd:26:ba:0a:2c:40:e1:e9:
         4e:76:73:8a:7b:17:19:50:9d:42:f4:41:fc:b5:8f:d4:66:03:
         78:c4:be:07:a6:94:16:da:4f:63:d5:84:3e:64:be:9b:cf:47:
         b0:d6:ec:10:12:20:8e:23:d3:67:f0:4b:ff:d9:58:da:ce:3b:
         35:b0:a9:fe:38:ea:1f:e6:6a:d4:11:ac:ac:e0:69:76:20:92:
         69:a5:5a:ec:00:91:31:9f:49:f8:42:c0:de:a6:c2:f3:0b:34:
         bc:f1:47:b3:bd:3a:f8:e4:84:01:1a:02:b0:05:1a:cf:13:11:
         1b:cd:4b:8d:46:2d:90:04:a8:57:cb:38:2a:68:bb:50:f0:4d:
         f8:e2:5d:11:ab:64:c1:86:3a:f4:c9:f0:d1:24:54:41:51:31:
         7e:75:dd:c9:21:2b:5a:93:cb:a5:1e:a9:10:1c:89:90:11:25:
         73:f0:78:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:52:08 2026 by rpki-client